DeutschShown in its original language — a full translation is planned for a future version.
Apache CXF: Mehrere Schwachstellen
view advisory published 2024-07-18
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41172US | high7.5 | — | ||
In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collecte… | ||||
| CVE-2024-32007US | high7.5 | — | ||
An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a… | ||||
| CVE-2024-29736US | critical9.1 | — | ||
A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The a… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:6508 vom 2024-09-10external
- Red Hat Security Advisory RHSA-2024:6883 vom 2024-09-19external
- Red Hat Security Advisory RHSA-2024:7052 vom 2024-09-24external
- Red Hat Security Advisory RHSA-2024:8823 vom 2024-11-04external
- Red Hat Security Advisory RHSA-2024:8824 vom 2024-11-04external
- Red Hat Security Advisory RHSA-2024:8826 vom 2024-11-04external
- Atlassian Security Bulletin - September 17 2024external
- Apache Security Advisory vom 2024-07-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan